apple-reminders

Pass

Audited by Gen Agent Trust Hub on May 19, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the remindctl CLI tool on macOS to perform actions such as listing, adding, and deleting reminders via shell commands.
  • [EXTERNAL_DOWNLOADS]: Instructions are provided to install remindctl using Homebrew from a third-party tap (steipete/tap) or building from source using pnpm. These are standard installation methods for the utility.
  • [PROMPT_INJECTION]: The skill reads and processes user-generated reminder content, which represents an indirect prompt injection surface. Ingestion points: Reminder content is ingested via remindctl today and remindctl list as documented in SKILL.md. Boundary markers: The instructions do not include specific boundary markers or warnings to the agent to disregard instructions within tasks. Capability inventory: Commands for edit, delete, and add (documented in SKILL.md) allow for local data modification. Sanitization: No sanitization or content filtering is specified for the task data.
Audit Metadata
Risk Level
SAFE
Analyzed
May 19, 2026, 06:46 AM